http://people.fedoraproject.org/~dwalsh/SELinux/F14/admin_readahead.patch Readahead tries to read every file. Needs dontaudit rules. I went with Domick Grift rename of /cgroup